__try
{
...
}
__except(EXCEPTION_EXECUTE_HANDLER) {WriteToLog("EXEPTION: DLL_PROCESS_ATTACH");}

__try
{
...
}
__except(EXCEPTION_EXECUTE_HANDLER) {WriteToLog("EXEPTION: ...");}

struct SHAREDMEMORY
{
	DWORD dwCRC;
	...
} *pstrSM;
#define LISTPROCESS_SIZE  100 
struct LISTPROCESS
{
	DWORD dwPID;
	HMODULE hModule;
} strLP[LISTPROCESS_SIZE];
...
HookAPI oHook;
GeneralMemory oGM;
Event oLockLP;
...
LPBYTE pbConv = NULL;
BYTE szKey[KEY_SIZE];
...
VOID inline WriteToDebugLog(LPCSTR pcszText)
{
...
}
...
BOOL WINAPI My_CreateProcessA(LPCSTR lpApplicationName, ...)
{
...
}
BOOL APIENTRY DllMain( HMODULE hModule, DWORD  ul_reason_for_call, LPVOID lpReserved)
{
	WriteToDebugLog("DllMain()");
	...
}

// Конструкторы объектов
GeneralMemory::GeneralMemory()
{
	pvMem = NULL;
	hFileMap = NULL;
}

HookAPI::HookAPI()
{
	pszDllFile = NULL;
	hThisModule = NULL;
	pAdrProc = NULL;
	dwAdrSize =  0 ;
	lSetHook = FALSE;
}

Event::Event()
{
	hEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
}

// Ловушка в родительском процессе
BOOL WINAPI My_CreateProcessA(LPCSTR lpApplicationName, LPSTR lpCommandLine, LPSECURITY_ATTRIBUTES lpProcessAttributes, LPSECURITY_ATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCSTR lpCurrentDirectory, LPSTARTUPINFOA lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation)
{
	BOOL lOk = CreateProcessA(lpApplicationName, lpCommandLine, lpProcessAttributes, lpThreadAttributes, bInheritHandles, dwCreationFlags | CREATE_SUSPENDED, lpEnvironment, lpCurrentDirectory, lpStartupInfo, lpProcessInformation);
	__try
	{
		if(lOk)
		{
			__try
			{
				oHook.InjectDll(lpProcessInformation->hProcess);
			}
			__finally
			{
				if((dwCreationFlags & CREATE_SUSPENDED) ==  0 ) ResumeThread(lpProcessInformation->hThread);
			}
		}
	}
	__except(EXCEPTION_EXECUTE_HANDLER) {WriteToLog("EXEPTION: CreateProcessA()");}
	return lOk;
}

// Внедрение DLL во внешний процесс
BOOL HookAPI::InjectDll(HANDLE hProcess)
{
	BOOL lOk = FALSE;
	PSTR pszRemoteFile = NULL;
	HANDLE hThread = NULL;
	__try
	{
		if(pszDllFile != NULL)
		{
			// Выделяем память в удаленном процессе
			INT iLen = lstrlen(pszDllFile) +  1 ;
			pszRemoteFile = (PSTR) VirtualAllocEx(hProcess, NULL, iLen, MEM_COMMIT, PAGE_READWRITE);
			// Копируем pcszDll
			if(pszRemoteFile != NULL && WriteProcessMemory(hProcess, pszRemoteFile, (PVOID) pszDllFile, iLen, NULL))
			{
				// Получаем адрес LoadLibraryW в Kernel32
				PTHREAD_START_ROUTINE pfnThread = (PTHREAD_START_ROUTINE) LoadLibraryA;
				if(pfnThread != NULL)
				{
					hThread = CreateRemoteThread(hProcess, NULL,  0 , pfnThread, pszRemoteFile,  0 , NULL);
					if(hThread != NULL)
					{
						WaitForSingleObject(hThread, INFINITE);
						lOk = TRUE;
					}
				}
			}
		}
	}
	__finally
	{
		// Освобождаем память
		if(pszRemoteFile != NULL) VirtualFreeEx(hProcess, pszRemoteFile,  0 , MEM_RELEASE);
		if(hThread != NULL) CloseHandle(hThread);
	}
	return lOk;
}

CreateProcess(..., CREATE_SUSPENDED, ...);
CreateRemoteThread(hProcess, GetModuleHandle("kernel32.dll"), "LoadLibraryA"), ...);